IA-1—Policy and Procedures
>Control Description
Develop, document, and disseminate to authorized personnel: (a) Addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and (b) Is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines; and
Agency/Entity identification and authentication policy that:
Procedures to facilitate the implementation of the identification and authentication policy and the associated identification and authentication controls;
Designate an individual with security responsibilities to manage the development, documentation, and dissemination of the identification and authentication policy and procedures; and
Review and update the current identification and authentication:
Policy annually and following any security incidents involving unauthorized access to CJI or systems used to process, store, or transmit CJI; and
Procedures annually and following any security incidents involving unauthorized access to CJI or systems used to process, store, or transmit CJI.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.